When one configures the indexer cluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
...he below steps works?
Steps :
Stop the incoming data to index-A
Roll the hot bucket on index-A
Move the data from s3 for index-A to index-B
Using the aws s3 sync s...
We are planning to move to Smartstore for the cold storage and we are having the on-prem multisite indexer cluster. We are having two S3 object storage created with our partners. Can I point out t...
Hello. I am running 8.2.2 on Linux. We have four clustered indexers and are using SmartStore. I would like to empty an index (and recover the disk space). I have thus c...
Hi Team,
I'm having some issues using OpenStack Swift as s3 for SmartStore. I have the following configuration in my indexes.conf:
[default] remotePath = volume:s3volume/$_index_name r...
Hi fellow Splunkers, As parameter maxTotalDataSizeMB is only available for non-Smartstoreindexes, what parameter inSmartstoreindex that replace this parameter? I want to start evicting bucket w...
...hen we add another log subset, nothing works properly. Let me share you an example. Scenario 1 In this case, we want: Windows logs must go on ot_windows index. All remaining logs still m...
The purpose of this topic is to create a home for legacy diagrams on howindexingworksin Splunk, created by the legendary Splunk Support Engineer, Masa! Keep in mind the information and diagrams in...